CVE-2022-24417
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
- Record
CVE-2022-24417- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2022-29309
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
- Record
EUVD-2022-29309- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mcfm-qpjr-xxm3
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious...
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
- Record
GHSA-mcfm-qpjr-xxm3- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM.
- Record
CVE-2022-24417- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- dell cpg bios
- dell g5 5505 firmware
- dell inspiron 22-3275 firmware
- dell inspiron 24-3475 firmware
- dell inspiron 27 7775 firmware
- dell inspiron 3180 firmware
- dell inspiron 3185 firmware
- dell inspiron 3195 firmware
- dell inspiron 3505 firmware
- dell inspiron 3515 firmware
- dell inspiron 3585 firmware
- dell inspiron 3595 firmware
Show 17 moreShow less
- dell inspiron 3785 firmware
- dell inspiron 5405 firmware
- dell inspiron 5415 firmware
- dell inspiron 5485 firmware
- dell inspiron 5505 firmware
- dell inspiron 5515 firmware
- dell inspiron 5575 firmware
- dell inspiron 5585 firmware
- dell inspiron 5675 firmware
- dell inspiron 5775 firmware
- dell inspiron 7375 firmware
- dell inspiron 7405 firmware
- dell inspiron 7415 firmware
- dell vostro 3405 firmware
- dell vostro 3515 firmware
- dell vostro 5415 firmware
- dell vostro 5515 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-24417 is a high vulnerability (CVSS 7.5) in Dell Cpg Bios, published May 26, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. No source names a fixed version.